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DETAILED ACTION 

This is a response to Applicant's Amendments filed on October 23, 2008. 
Claims 1-5, 8-13, and 16-20 are currently pending. 

Response to Arguments 
1 . Applicant's arguments, see Remarks and Amendments, filed October 23, 2008, 
with respect to the rejection(s) of claim(s) 1-5, 8-13, and 16-20 under Wray have been 
fully considered and are persuasive. Therefore, the rejection has been withdrawn. 
However, upon further consideration, a new ground(s) of rejection is made in view of 
Pabia, Young, and Dierks as presented in the prior art rejection. 

Claim Objections 
1 . Claim 9 is objected to because of the following informalities: 
Claim 9 ... receiving conformat i on confirmation ... 
Appropriate correction is required. 

Claim Rejections - 35 USC § 101 
35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, macliine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 17-19 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

The claims fail to place the invention squarely within one statutory class of invention. At 
Par 0025 of the instant specification, applicant has provided evidence that applicant 
intends the "medium" to include signals. As such, the claim is drawn to a form of 
energy. Energy is not one of the four categories of invention and therefore this claim(s) 
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is/are not statutory. Energy is not a series of steps or acts and thus is not a process. 
Energy is not a physical article or object and as such is not a machine or manufacture. 
Energy is not a combination of substances and therefore not a composition of matter. 

Claim Rejections - 35 USC §112 
The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification sliall contain a written description of tlie invention, and of tlie manner and process of 
malting and using it, in sucli full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

1 . Claim 9 is rejected under 35 U.S.C. 1 1 2, first paragraph, as failing to comply with 
the written description requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to reasonably convey to one skilled in 
the relevant art that the inventor(s), at the time the application was filed, had possession 
of the claimed invention. 

Regarding claim 9, the limitation "receiving conformation [confirmation] from the first 
client for verifying the copy of the first UID is identical to the first UID at the first client" is 
not supported in the specification." Nowhere in the specification shows that the second 
client has received anything about the successful verification of the first UID, other than 
the third email message being sent upon successful verification. For purposes of 
examination, sending the third email message is also a confirmation of verifying the 
copy of the first UID is identical to the first UID at the first client. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness 
under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

1. Claims 1-4, 8-12, 16-18, and 20 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Pabia [US 7127613 B2], and further in view of Young [US 7024690 

B1]. 

Regarding claim 1 PabIa teaches a method for authenticating a sender of a digital 
object, comprising: 

recognizing a peer-to-peer (P2P) communication between a first client and a second 
client, said first client attempting to exchange information securely with said second 
client via the P2P communication without a third party mediation, said third party 
mediation including certificate authorities [PabIa 2: 31-46] [PabIa 5: 30-46]; 
establishing an electronic mail protocol between the first client and the second client, 
said e-mail protocol, being separate from the P2P communication, comprising Simple 
Mail Transport Protocol (SMTP) [PabIa 21 : 23-29 -MIME content type uses SMTP.]; 
generating a first unique identifier (UID) [PabIa 20: 20]; 
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transmitting from the first client to a previously known address of the second client, via 
the established electronic mail protocol, a first electronic mail (e-mail) message 
comprising the first DID [Pabia 5: 55-59]; receiving from the second client, via the 
electronic mail protocol, a second e-mail message directed to the first client comprising 
a second UID [Pabia 5: 61-64]; 

wherein at least one of the e-mail messages transmitted to the previously known 
address between the first client and the second client further comprises the digital 
object [Pabia 5: 61-64], said digital obiect being used for authenticating the information 
to be exchanged between the first client and the second client via the P2P 
communication and not for authenticating the first e-mail message, the second e-mail 
message, or the third e-mail message [MPEP 2106 -Statements of intended use does 
not limit a claim to a particular structure, and therefore does not limit the scope of a 
claim or claim limitation.]. 

Pabia does not explicitly teach authenticating the user comprising transmitting from the 
first client to a previously known address of the second client, the first message 
comprising the first UID; receiving from the second client, the second message directed 
to the first client comprising a second UID and a copy of the first UID; verifying the copy 
of the first UID is identical to the first UID at the first client; and transmitting from the first 
client to the previously known address of the second client, via the electronic mail 
protocol, a third e-mail message to the second client comprising a copy of the second 
UID. 

Young teaches authenticating a user comprising the method of generating a first unique 
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identifier (UID) [Young 5: 46]; transmitting from the first client to a previously known 
address of the second client, via an established protocol, a first message comprising a 
first UID [Young 5: 45-49]; receiving from the second client, via the established 
protocol, a second message directed to the first client comprising a second UID and a 
copy of the first UID Pr'oung 6: 5-8 -message authentication code contains copy of the 
first UID]; verifying the copy of the first UID is identical to the first UID at the first client 
[Young 6: 15-21]; and transmitting from the first client to the previously known address 
of the second client, via the established protocol, a third message to the second client 
comprising a copy of the second UID [Young 6: 30-32 -the other message 
authentication code contains the copy of the second UID.]. 

It would have been obvious to one of ordinary skilled in the art at the time of invention to 

modify Pabla's exchange of network service email messages by incorporating the 

established authentication protocol as taught by Young. The suggestion/motivation 

would have been to authenticate the service request e-mail messages prior to accepting 

any active content or digital objects that have been exchanged. 

Regarding claim 2, Pabia in view of Young teaches the method of claim 1 wherein the 

first message further comprises the digital object [PabIa 5: 61-64]. 

Regarding claim 3, PabIa in view of Young teaches the method of claim 1 wherein the 

third message further comprises the digital object [PabIa 5: 61-64]. 

Regarding claim 4, PabIa in view of Young teaches the method of claim 1 wherein the 

digital object is a public key for a cryptographic system [PabIa 5: 61-64]. 
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Regarding claim 8, Pabia in view of Young teaches the method of claim 1 wherein the 
first DID contains at least 128 bits [PabIa Fig 12]. 

Regarding claim 9, PabIa teaches a method for authenticating a sender of a digital 
object, comprising: 

recognizing a peer-to-peer (P2P) communication between a first client and a second 
client, said first client attempting to exchange information securely with said second 
client via the P2P communication without a third party mediation, said third party 
mediation including certificate authorities [PabIa 2: 31-46] [PabIa 5: 30-46]; 
establishing an electronic mail protocol between the first client and the second client, 
said e-mail protocol, being separate from the P2P communication, comprising Simple 
Mail Transport Protocol (SMTP) [PabIa 21 : 23-29 -MIME content type uses SMTP.]; 
receiving from the first client to a previously known address of the second client, via the 
established electronic mail protocol, a first electronic mail (e-mail) message comprising 
a first DID [PabIa 5: 55-59]; generating a second DID at the second client [PabIa 20: 
20]; transmitting from the second client, via the electronic mail protocol, a second e-mail 
message directed to the first client comprising a second DID [PabIa 5: 61-64]; 
wherein at least one of the e-mail messages transmitted to the previously known 
address between the first client and the second client further comprises the digital 
object [PabIa 5: 61-64], said digital obiect being used for authenticating the information 
to be exchanged between the first client and the second client via the P2P 
communication and not for authenticating the first e-mail message, the second e-mail 
message, or the third e-mail message [MPEP 2106 -Statements of intended use does 
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not limit a claim to a particular structure, and therefore does not limit the scope of a 
claim or claim limitation.]. 

Pabia does not explicitly teach authenticating the user comprising receiving from the 
first client to a previously known address of the second client, the first message 
comprising a first UID; transmitting from the second client, the second message directed 
to the first client comprising the second UID and a copy of the first UID; receiving 
conformation from the first client for verifying the copy of the first UID is identical to the 
first UID at the first client; and receiving at the second client, via the electronic mail 
protocol, a third e-mail message comprising a copy of the second UID. 
Young teaches authenticating a user comprising the method of receiving from the first 
client to a previously known address of the second client, via an established protocol, a 
first message comprising a first UID [Young 5: 45-49]; transmitting from the second 
client, via the established protocol, a second message directed to the first client 
comprising a second UID and a copy of the first UID [Young 6: 5-8 -message 
authentication code contains copy of the first UID]; receiving conformation from the first 
client for verifying the copy of the first UID is identical to the first UID at the first client 
[Young 6: 15-21]; and receiving at the second client, via the established protocol, a 
third message to the second client comprising a copy of the second UID [Young 6: 30- 
32 -the other message authentication code contains the copy of the second UID.]. 
It would have been obvious to one of ordinary skilled in the art at the time of invention to 
modify Pabla's exchange of network service email messages by incorporating the 
established authentication protocol as taught by Young. The suggestion/motivation 
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would have been to authenticate the service request e-mail messages prior to accepting 

any active content or digital objects that have been exchanged. 

Claims 10-12, and 16 are rejected because these are similar matter to claims 2-4, and 

8. 

Claims 17, and 20 are rejected because these are similar matter to claim 1 . 
Claims 18 is rejected because it is similar matter to claim 4. 

2. Claims 5, 13, and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Pabia [US 7127613 B2], and further in view of Young [US 7024690 B1], Dierks 

[Dierks 1999]. 

Regarding claim 5, PabIa in view of Young teaches the method of claim 4 wherein the 
TLS is used for generating session keys [PabIa 7: 25-26]. 

PabIa in view of Young does not explicitly teach the second message further comprising 

a second public key for the cryptographic system. 

Dierks teaches generating session keys using TLS comprising a second message in a 
handshake include a second public key for the cryptographic system [Dierks Page 30, 
Fig 1]. 

It would have been obvious to one of ordinary skilled in the art at the time of invention to 
modify PabIa in view of Young to include a second public key in the second message of 
a handshake as taught by Dierks. The suggestion/motivation would have been to follow 
the TLS protocol as part of generating session keys that require both party's public keys 
[PabIa 7: 25-26]. 

Claims 13 and 19 are rejected because these are similar matter to claim 5. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from tine 
examiner sliould be directed to MARTIN JERIKO P. SAN JUAN whose telephone 
number is (571)272-7875. The examiner can normally be reached on M-F 8:30a - 
6:00p EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/MJSJ/ 

Martin Jeriko San Juan 
Examiner, Art Unit 2432 



/Benjamin E Lanier/ 

Primary Examiner, Art Unit 2432 



